welcome-gemini-login-us.tem3[.]io
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCRisk.com may earn a referral commission when users sign up through this link.
Description of welcome-gemini-login-us.tem3[.]io
The domain welcome-gemini-login-us.tem3[.]io appears to host a landing page that imitates a cryptocurrency account login or promotional page. The visible content prominently uses Gemini branding, while the page metadata mixes references to Gemini and Uphold, which is inconsistent with how established financial platforms typically present their identity. The screenshot also shows the page being served through a site-building platform subdomain rather than an official brand-owned domain.
Based on the domain structure and page content, this page appears to be a branded login-themed landing page rather than an official corporate website. The use of a third-party builder environment, combined with mixed brand references and account-access language, suggests it may have been created to attract users looking for a crypto platform sign-in page.
The domain also closely resembles a well-known e-commerce brand domain in spelling, while the page itself displays cryptocurrency branding. That mismatch may indicate a disposable or deceptive setup rather than a stable, clearly operated service.
Safety Assessment for welcome-gemini-login-us.tem3[.]io
Multiple scan signals indicate elevated risk at the time of this scan. The domain was flagged by 16 out of 91 security engines, and the malware scan classified the page as malicious while identifying a flagged external resource. Although some blacklist databases did not list the domain at the time of review, the combination of multi-engine detections, phishing labels, and suspicious external references is a notable concern.
The page content itself adds to the risk profile. The domain name includes "gemini login" wording, the screenshot displays Gemini branding, and the metadata references both Gemini and Uphold, which may indicate brand confusion or impersonation. In addition, the domain closely resembles temu.com in spelling and may be a look-alike domain, even though the visible page content points to cryptocurrency themes instead of shopping. This kind of mismatch can be consistent with deceptive campaigns that reuse disposable infrastructure.
The site is also not ranked in major popularity data and appears to be hosted on a builder subdomain rather than a clearly official brand domain. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by a mainstream certificate authority and is served through Cloudflare infrastructure, with an IP address associated with Cloudflare and nameservers also pointing to that provider. DNSSEC appears to be unsigned, which is not uncommon but does mean there is no DNSSEC validation layer visible from the provided data.
From a security perspective, the more important concerns are at the application and reputation level rather than basic transport encryption. A flagged file entry was reported for the page, and one referenced external domain was identified as suspicious by the malware scan. The domain is a subdomain on tem3.io, has no Tranco ranking, and shows branding inconsistencies that may indicate a temporary phishing or impersonation setup.
Share your experience with this website. Was it safe? Did you encounter any issues?